xnu-3248.40.184.tar.gz

[apple/xnu.git] / osfmk / kern / ipc_host.c

diff --git a/osfmk/kern/ipc_host.c b/osfmk/kern/ipc_host.c
index 23d830ffd5c5ed25455a0310e17aedeb3d1c9a22..88e629de46e15f76036d459a42737001d95da68b 100644 (file)
--- a/osfmk/kern/ipc_host.c
+++ b/osfmk/kern/ipc_host.c
@@ -1,16 +1,19 @@
 /*
 /*

- * Copyright (c) 2000 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2000-2009 Apple Inc. All rights reserved.

  *
  *

- * @APPLE_LICENSE_HEADER_START@
- * 
- * Copyright (c) 1999-2003 Apple Computer, Inc.  All Rights Reserved.
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_START@

  * 
  * This file contains Original Code and/or Modifications of Original Code
  * as defined in and that are subject to the Apple Public Source License
  * Version 2.0 (the 'License'). You may not use this file except in
  * 
  * This file contains Original Code and/or Modifications of Original Code
  * as defined in and that are subject to the Apple Public Source License
  * Version 2.0 (the 'License'). You may not use this file except in

- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
+ * compliance with the License. The rights granted to you under the License
+ * may not be used to create, or enable the creation or redistribution of,
+ * unlawful or unlicensed copies of an Apple operating system, or to
+ * circumvent, violate, or enable the circumvention or violation of, any
+ * terms of an Apple operating system software license agreement.
+ * 
+ * Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this file.

  * 
  * The Original Code and all software distributed under the License are
  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  * 
  * The Original Code and all software distributed under the License are
  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER


@@ -20,7 +23,7 @@
  * Please see the License for the specific language governing rights and
  * limitations under the License.
  * 
  * Please see the License for the specific language governing rights and
  * limitations under the License.
  * 

- * @APPLE_LICENSE_HEADER_END@
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_END@

  */
 /*
  * @OSF_COPYRIGHT@
  */
 /*
  * @OSF_COPYRIGHT@


@@ -60,11 +63,10 @@
  */
 #include <mach/message.h>
 #include <mach/mach_traps.h>
  */
 #include <mach/message.h>
 #include <mach/mach_traps.h>

-#include <mach/etap_events.h>

 #include <mach/mach_host_server.h>
 #include <mach/mach_host_server.h>

+#include <mach/host_priv_server.h>

 #include <kern/host.h>
 #include <kern/processor.h>
 #include <kern/host.h>
 #include <kern/processor.h>

-#include <kern/lock.h>

 #include <kern/task.h>
 #include <kern/thread.h>
 #include <kern/ipc_host.h>
 #include <kern/task.h>
 #include <kern/thread.h>
 #include <kern/ipc_host.h>


@@ -74,18 +76,14 @@
 #include <ipc/ipc_port.h>
 #include <ipc/ipc_space.h>
 
 #include <ipc/ipc_port.h>
 #include <ipc/ipc_space.h>
 

+#if CONFIG_MACF
+#include <security/mac_mach_internal.h>
+#endif
+

 /*
  * Forward declarations
  */
 
 /*
  * Forward declarations
  */
 

-void
-ipc_processor_terminate(
-       processor_t     processor);
-
-void
-ipc_processor_disable(
-       processor_t     processor);
-

 boolean_t
 ref_pset_port_locked(
        ipc_port_t port, boolean_t matchn, processor_set_t *ppset);
 boolean_t
 ref_pset_port_locked(
        ipc_port_t port, boolean_t matchn, processor_set_t *ppset);


@@ -94,12 +92,15 @@ ref_pset_port_locked(
  *     ipc_host_init: set up various things.
  */
 
  *     ipc_host_init: set up various things.
  */
 

+extern lck_grp_t               host_notify_lock_grp;
+extern lck_attr_t              host_notify_lock_attr;
+

 void ipc_host_init(void)
 {
        ipc_port_t      port;
        int i;
 
 void ipc_host_init(void)
 {
        ipc_port_t      port;
        int i;
 

-       mutex_init(&realhost.lock, ETAP_MISC_MASTER);
+       lck_mtx_init(&realhost.lock, &host_notify_lock_grp, &host_notify_lock_attr);

 
        /*
         *      Allocate and set up the two host ports.
 
        /*
         *      Allocate and set up the two host ports.


@@ -108,24 +109,27 @@ void ipc_host_init(void)
        if (port == IP_NULL)
                panic("ipc_host_init");
 
        if (port == IP_NULL)
                panic("ipc_host_init");
 

-       ipc_kobject_set(port, (ipc_kobject_t) &realhost, IKOT_HOST);
-       realhost.host_self = port;
+       ipc_kobject_set(port, (ipc_kobject_t) &realhost, IKOT_HOST_SECURITY);
+       kernel_set_special_port(&realhost, HOST_SECURITY_PORT,
+                               ipc_port_make_send(port));

 
        port = ipc_port_alloc_kernel();
        if (port == IP_NULL)
                panic("ipc_host_init");
 
 
        port = ipc_port_alloc_kernel();
        if (port == IP_NULL)
                panic("ipc_host_init");
 

-       ipc_kobject_set(port, (ipc_kobject_t) &realhost, IKOT_HOST_PRIV);
-       realhost.host_priv_self = port;
+       ipc_kobject_set(port, (ipc_kobject_t) &realhost, IKOT_HOST);
+       kernel_set_special_port(&realhost, HOST_PORT,
+                               ipc_port_make_send(port));

 
        port = ipc_port_alloc_kernel();
        if (port == IP_NULL)
                panic("ipc_host_init");
 
 
        port = ipc_port_alloc_kernel();
        if (port == IP_NULL)
                panic("ipc_host_init");
 

-       ipc_kobject_set(port, (ipc_kobject_t) &realhost, IKOT_HOST_SECURITY);
-       realhost.host_security_self = port;
+       ipc_kobject_set(port, (ipc_kobject_t) &realhost, IKOT_HOST_PRIV);
+       kernel_set_special_port(&realhost, HOST_PRIV_PORT,
+                               ipc_port_make_send(port));

 
 

-       realhost.io_master = IP_NULL;
+       /* the rest of the special ports will be set up later */

 
        for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++) {
                        realhost.exc_actions[i].port = IP_NULL;
 
        for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++) {
                        realhost.exc_actions[i].port = IP_NULL;


@@ -134,8 +138,8 @@ void ipc_host_init(void)
        /*
         *      Set up ipc for default processor set.
         */
        /*
         *      Set up ipc for default processor set.
         */

-       ipc_pset_init(&default_pset);
-       ipc_pset_enable(&default_pset);
+       ipc_pset_init(&pset0);
+       ipc_pset_enable(&pset0);

 
        /*
         *      And for master processor
 
        /*
         *      And for master processor


@@ -156,12 +160,15 @@ void ipc_host_init(void)
  */
 
 mach_port_name_t
  */
 
 mach_port_name_t

-host_self_trap(void)
+host_self_trap(
+       __unused struct host_self_trap_args *args)

 {
        ipc_port_t sright;
 {
        ipc_port_t sright;

+       mach_port_name_t name;

 
        sright = ipc_port_copy_send(current_task()->itk_host);
 
        sright = ipc_port_copy_send(current_task()->itk_host);

-       return ipc_port_copyout_send(sright, current_space());
+       name = ipc_port_copyout_send(sright, current_space());
+       return name;

 }
 
 /*
 }
 
 /*


@@ -196,51 +203,6 @@ ipc_processor_enable(
        myport = processor->processor_self;
        ipc_kobject_set(myport, (ipc_kobject_t) processor, IKOT_PROCESSOR);
 }
        myport = processor->processor_self;
        ipc_kobject_set(myport, (ipc_kobject_t) processor, IKOT_PROCESSOR);
 }

-
-/*
- *     ipc_processor_disable:
- *
- *     Disable ipc control of processor by clearing port object.
- */
-void
-ipc_processor_disable(
-       processor_t     processor)
-{
-       ipc_port_t      myport;
-
-       myport = processor->processor_self;
-       if (myport == IP_NULL)
-               return;
-       ipc_kobject_set(myport, IKO_NULL, IKOT_NONE);
-}
-
-/*
- *     ipc_processor_terminate:
- *
- *     Processor is off-line.  Destroy ipc control port.
- */
-void
-ipc_processor_terminate(
-       processor_t     processor)
-{
-       ipc_port_t      myport;
-       spl_t           s;
-
-       s = splsched();
-       processor_lock(processor);
-       myport = processor->processor_self;
-       if (myport == IP_NULL) {
-               processor_unlock(processor);
-               splx(s);
-               return;
-       }
-
-       processor->processor_self = IP_NULL;
-       processor_unlock(processor);
-       splx(s);
-
-       ipc_port_dealloc_kernel(myport);
-}

        
 /*
  *     ipc_pset_init:
        
 /*
  *     ipc_pset_init:


@@ -274,51 +236,14 @@ void
 ipc_pset_enable(
        processor_set_t         pset)
 {
 ipc_pset_enable(
        processor_set_t         pset)
 {

-       pset_lock(pset);
-       if (pset->active) {
-               ipc_kobject_set(pset->pset_self,
-                               (ipc_kobject_t) pset, IKOT_PSET);
-               ipc_kobject_set(pset->pset_name_self,
-                               (ipc_kobject_t) pset, IKOT_PSET_NAME);
-               pset->ref_count += 2;
-       }
-       pset_unlock(pset);
+       ipc_kobject_set(pset->pset_self, (ipc_kobject_t) pset, IKOT_PSET);
+       ipc_kobject_set(pset->pset_name_self, (ipc_kobject_t) pset, IKOT_PSET_NAME);

 }
 
 /*
 }
 
 /*

- *     ipc_pset_disable:
+ *     processor_set_default:

  *
  *

- *     Disable ipc access to a processor set by clearing the port objects.
- *     Caller must hold pset lock and a reference to the pset.  Ok to
- *     just decrement pset reference count as a result.
- */
-void
-ipc_pset_disable(
-       processor_set_t         pset)
-{
-       ipc_kobject_set(pset->pset_self, IKO_NULL, IKOT_NONE);
-       ipc_kobject_set(pset->pset_name_self, IKO_NULL, IKOT_NONE);
-       pset->ref_count -= 2;
-}
-
-/*
- *     ipc_pset_terminate:
- *
- *     Processor set is dead.  Deallocate the ipc control structures.
- */
-void
-ipc_pset_terminate(
-       processor_set_t         pset)
-{
-       ipc_port_dealloc_kernel(pset->pset_self);
-       ipc_port_dealloc_kernel(pset->pset_name_self);
-}
-
-/*
- *     processor_set_default, processor_set_default_priv:
- *
- *     Return ports for manipulating default_processor set.  MiG code
- *     differentiates between these two routines.
+ *     Return ports for manipulating default_processor set.

  */
 kern_return_t
 processor_set_default(
  */
 kern_return_t
 processor_set_default(


@@ -328,9 +253,9 @@ processor_set_default(
        if (host == HOST_NULL)
                return(KERN_INVALID_ARGUMENT);
 
        if (host == HOST_NULL)
                return(KERN_INVALID_ARGUMENT);
 

-       *pset = &default_pset;
-       pset_reference(*pset);
-       return(KERN_SUCCESS);
+       *pset = &pset0;
+
+       return (KERN_SUCCESS);

 }
 
 /*
 }
 
 /*


@@ -474,18 +399,13 @@ ref_pset_port_locked(ipc_port_t port, boolean_t matchn, processor_set_t *ppset)
        pset = PROCESSOR_SET_NULL;
        if (ip_active(port) &&
                ((ip_kotype(port) == IKOT_PSET) ||
        pset = PROCESSOR_SET_NULL;
        if (ip_active(port) &&
                ((ip_kotype(port) == IKOT_PSET) ||

-                (matchn && (ip_kotype(port) == IKOT_PSET_NAME)))) {
+                       (matchn && (ip_kotype(port) == IKOT_PSET_NAME)))) {

                pset = (processor_set_t) port->ip_kobject;
                pset = (processor_set_t) port->ip_kobject;

-               if (!pset_lock_try(pset)) {
-                       ip_unlock(port);
-                       mutex_pause();
-                       return (FALSE);
-               }
-               pset->ref_count++;
-               pset_unlock(pset);

        }
        }

+

        *ppset = pset;
        ip_unlock(port);
        *ppset = pset;
        ip_unlock(port);

+

        return (TRUE);
 }
 
        return (TRUE);
 }
 


@@ -504,8 +424,7 @@ convert_host_to_port(
 {
        ipc_port_t port;
 
 {
        ipc_port_t port;
 

-       port = ipc_port_make_send(host->host_self);
-
+       host_get_host_port(host, &port);

        return port;
 }
 
        return port;
 }
 


@@ -514,6 +433,7 @@ convert_host_to_port(
  *     Purpose:
  *             Convert from a processor to a port.
  *             Produces a naked send right which may be invalid.
  *     Purpose:
  *             Convert from a processor to a port.
  *             Produces a naked send right which may be invalid.

+ *             Processors are not reference counted, so nothing to release.

  *     Conditions:
  *             Nothing locked.
  */
  *     Conditions:
  *             Nothing locked.
  */


@@ -522,20 +442,10 @@ ipc_port_t
 convert_processor_to_port(
        processor_t             processor)
 {
 convert_processor_to_port(
        processor_t             processor)
 {

-       ipc_port_t port;
-       spl_t   s;
-
-       s = splsched();
-       processor_lock(processor);
-
-       if (processor->processor_self != IP_NULL)
-               port = ipc_port_make_send(processor->processor_self);
-       else
-               port = IP_NULL;
-
-       processor_unlock(processor);
-       splx(s);
+       ipc_port_t port = processor->processor_self;

 
 

+       if (port != IP_NULL)
+               port = ipc_port_make_send(port);

        return port;
 }
 
        return port;
 }
 


@@ -543,8 +453,8 @@ convert_processor_to_port(
  *     Routine:        convert_pset_to_port
  *     Purpose:
  *             Convert from a pset to a port.
  *     Routine:        convert_pset_to_port
  *     Purpose:
  *             Convert from a pset to a port.

- *             Consumes a pset ref; produces a naked send right
- *             which may be invalid.
+ *             Produces a naked send right which may be invalid.
+ *             Processor sets are not reference counted, so nothing to release.

  *     Conditions:
  *             Nothing locked.
  */
  *     Conditions:
  *             Nothing locked.
  */


@@ -553,16 +463,11 @@ ipc_port_t
 convert_pset_to_port(
        processor_set_t         pset)
 {
 convert_pset_to_port(
        processor_set_t         pset)
 {

-       ipc_port_t port;
+       ipc_port_t port = pset->pset_self;

 
 

-       pset_lock(pset);
-       if (pset->active)
-               port = ipc_port_make_send(pset->pset_self);
-       else
-               port = IP_NULL;
-       pset_unlock(pset);
+       if (port != IP_NULL)
+               port = ipc_port_make_send(port);

 
 

-       pset_deallocate(pset);

        return port;
 }
 
        return port;
 }
 


@@ -570,8 +475,8 @@ convert_pset_to_port(
  *     Routine:        convert_pset_name_to_port
  *     Purpose:
  *             Convert from a pset to a port.
  *     Routine:        convert_pset_name_to_port
  *     Purpose:
  *             Convert from a pset to a port.

- *             Consumes a pset ref; produces a naked send right
- *             which may be invalid.
+ *             Produces a naked send right which may be invalid.
+ *             Processor sets are not reference counted, so nothing to release.

  *     Conditions:
  *             Nothing locked.
  */
  *     Conditions:
  *             Nothing locked.
  */


@@ -580,16 +485,11 @@ ipc_port_t
 convert_pset_name_to_port(
        processor_set_name_t            pset)
 {
 convert_pset_name_to_port(
        processor_set_name_t            pset)
 {

-       ipc_port_t port;
+       ipc_port_t port = pset->pset_name_self;

 
 

-       pset_lock(pset);
-       if (pset->active)
-               port = ipc_port_make_send(pset->pset_name_self);
-       else
-               port = IP_NULL;
-       pset_unlock(pset);
+       if (port != IP_NULL)
+               port = ipc_port_make_send(port);

 
 

-       pset_deallocate(pset);

        return port;
 }
 
        return port;
 }
 


@@ -637,7 +537,7 @@ convert_port_to_host_security(
  */
 kern_return_t
 host_set_exception_ports(
  */
 kern_return_t
 host_set_exception_ports(

-       host_priv_t                             host_priv,
+       host_priv_t                     host_priv,

        exception_mask_t                exception_mask,
        ipc_port_t                      new_port,
        exception_behavior_t            new_behavior,
        exception_mask_t                exception_mask,
        ipc_port_t                      new_port,
        exception_behavior_t            new_behavior,


@@ -650,14 +550,12 @@ host_set_exception_ports(
                return KERN_INVALID_ARGUMENT;
        }
 
                return KERN_INVALID_ARGUMENT;
        }
 

-       assert(host_priv == &realhost);
-
-       if (exception_mask & ~EXC_MASK_ALL) {
+       if (exception_mask & ~EXC_MASK_VALID) {

                return KERN_INVALID_ARGUMENT;
        }
 
        if (IP_VALID(new_port)) {
                return KERN_INVALID_ARGUMENT;
        }
 
        if (IP_VALID(new_port)) {

-               switch (new_behavior) {
+               switch (new_behavior & ~MACH_EXCEPTION_CODES) {

                case EXCEPTION_DEFAULT:
                case EXCEPTION_STATE:
                case EXCEPTION_STATE_IDENTITY:
                case EXCEPTION_DEFAULT:
                case EXCEPTION_STATE:
                case EXCEPTION_STATE_IDENTITY:


@@ -666,10 +564,22 @@ host_set_exception_ports(
                        return KERN_INVALID_ARGUMENT;
                }
        }
                        return KERN_INVALID_ARGUMENT;
                }
        }

-       /* Cannot easily check "new_flavor", but that just means that
-        * the flavor in the generated exception message might be garbage:
-        * GIGO
+
+       /*
+        * Check the validity of the thread_state_flavor by calling the
+        * VALID_THREAD_STATE_FLAVOR architecture dependent macro defined in
+        * osfmk/mach/ARCHITECTURE/thread_status.h

         */
         */

+       if (new_flavor != 0 && !VALID_THREAD_STATE_FLAVOR(new_flavor))
+               return (KERN_INVALID_ARGUMENT);
+
+#if CONFIG_MACF
+       if (mac_task_check_set_host_exception_ports(current_task(), exception_mask) != 0)
+               return KERN_NO_ACCESS;
+#endif
+
+       assert(host_priv == &realhost);
+

        host_lock(host_priv);
 
        for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++) {
        host_lock(host_priv);
 
        for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++) {


@@ -724,14 +634,12 @@ host_get_exception_ports(
        exception_behavior_array_t      behaviors,
        thread_state_flavor_array_t     flavors         )
 {
        exception_behavior_array_t      behaviors,
        thread_state_flavor_array_t     flavors         )
 {

-       register int    i,
-                       j,
-                       count;
+       unsigned int    i, j, count;

 
        if (host_priv == HOST_PRIV_NULL)
                return KERN_INVALID_ARGUMENT;
 
 
        if (host_priv == HOST_PRIV_NULL)
                return KERN_INVALID_ARGUMENT;
 

-       if (exception_mask & ~EXC_MASK_ALL) {
+       if (exception_mask & ~EXC_MASK_VALID) {

                return KERN_INVALID_ARGUMENT;
        }
 
                return KERN_INVALID_ARGUMENT;
        }
 


@@ -777,7 +685,7 @@ host_get_exception_ports(
 
 kern_return_t
 host_swap_exception_ports(
 
 kern_return_t
 host_swap_exception_ports(

-       host_priv_t                             host_priv,
+       host_priv_t                     host_priv,

        exception_mask_t                exception_mask,
        ipc_port_t                      new_port,
        exception_behavior_t            new_behavior,
        exception_mask_t                exception_mask,
        ipc_port_t                      new_port,
        exception_behavior_t            new_behavior,


@@ -788,7 +696,7 @@ host_swap_exception_ports(
        exception_behavior_array_t      behaviors,
        thread_state_flavor_array_t     flavors         )
 {
        exception_behavior_array_t      behaviors,
        thread_state_flavor_array_t     flavors         )
 {

-       register int    i,
+       unsigned int    i,

                        j,
                        count;
        ipc_port_t      old_port[EXC_TYPES_COUNT];
                        j,
                        count;
        ipc_port_t      old_port[EXC_TYPES_COUNT];


@@ -796,7 +704,7 @@ host_swap_exception_ports(
        if (host_priv == HOST_PRIV_NULL)
                return KERN_INVALID_ARGUMENT;
 
        if (host_priv == HOST_PRIV_NULL)
                return KERN_INVALID_ARGUMENT;
 

-       if (exception_mask & ~EXC_MASK_ALL) {
+       if (exception_mask & ~EXC_MASK_VALID) {

                return KERN_INVALID_ARGUMENT;
        }
 
                return KERN_INVALID_ARGUMENT;
        }
 


@@ -810,15 +718,19 @@ host_swap_exception_ports(
                        return KERN_INVALID_ARGUMENT;
                }
        }
                        return KERN_INVALID_ARGUMENT;
                }
        }

-       /* Cannot easily check "new_flavor", but that just means that
-        * the flavor in the generated exception message might be garbage:
-        * GIGO */

 
 

-       host_lock(host_priv);
+       if (new_flavor != 0 && !VALID_THREAD_STATE_FLAVOR(new_flavor))
+               return (KERN_INVALID_ARGUMENT);

 
 

-       count = 0;
+#if CONFIG_MACF
+       if (mac_task_check_set_host_exception_ports(current_task(), exception_mask) != 0)
+               return KERN_NO_ACCESS;
+#endif /* CONFIG_MACF */

 
 

-       for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++) {
+       host_lock(host_priv);
+
+       assert(EXC_TYPES_COUNT > FIRST_EXCEPTION);
+       for (count=0, i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT && count < *CountCnt; i++) {

                if (exception_mask & (1 << i)) {
                        for (j = 0; j < count; j++) {
 /*
                if (exception_mask & (1 << i)) {
                        for (j = 0; j < count; j++) {
 /*


@@ -846,9 +758,6 @@ host_swap_exception_ports(
                                ipc_port_copy_send(new_port);
                        host_priv->exc_actions[i].behavior = new_behavior;
                        host_priv->exc_actions[i].flavor = new_flavor;
                                ipc_port_copy_send(new_port);
                        host_priv->exc_actions[i].behavior = new_behavior;
                        host_priv->exc_actions[i].flavor = new_flavor;

-                       if (count > *CountCnt) {
-                               break;
-                       }

                } else
                        old_port[i] = IP_NULL;
        }/* for */
                } else
                        old_port[i] = IP_NULL;
        }/* for */


@@ -857,9 +766,11 @@ host_swap_exception_ports(
        /*
         * Consume send rights without any lock held.
         */
        /*
         * Consume send rights without any lock held.
         */

-       for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++)
+       while (--i >= FIRST_EXCEPTION) {

                if (IP_VALID(old_port[i]))
                        ipc_port_release_send(old_port[i]);
                if (IP_VALID(old_port[i]))
                        ipc_port_release_send(old_port[i]);

+       }
+

        if (IP_VALID(new_port))          /* consume send right */
                ipc_port_release_send(new_port);
        *CountCnt = count;
        if (IP_VALID(new_port))          /* consume send right */
                ipc_port_release_send(new_port);
        *CountCnt = count;